I'm seeing constant logon/logoff records for my Windows login on all our SQL servers. About 20 per second! This doesn't seem right. There's a pattern of these 3 events:
EventID Task Category Security ID 4672 Special logon my account 4624 Logon NULL SID 4634 Logoff my account
I'm going through everything I can think of:
- scan my PC for malware
- check for databases/agent jobs owned by me (shouldn't be any)
- check for services running under my account (shouldn't be any)
I have SSMS open all day and all the servers are in the Registered Servers list, although I usually only have one or two open in the Object Explorer at a time. (This is SQL 2005 on my PC and all servers.) It's not this, is it?
Update: I thinks it's SSMS. I closed it down and all this activity has stopped since then. Am I worrying about nothing?
Any suggestions, please?